$ rpki-client -vvf rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft File: LyR3675WsNegrUTCcX21_ggNyug.mft (raw, json) Hash identifier: Jo8J6zwp/S1U6HOTI9jJNHpsVWURWb8XtTryIczGL+Y= Subject key identifier: E6:D2:58:EF:DF:D7:0C:1A:B6:A7:A0:A8:8F:5C:1C:42:4C:EB:30:6F Authority key identifier: 2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 Certificate issuer: /CN=A91479A7/serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft Manifest number: 015B Signing time: Tue 29 Apr 2025 04:27:29 +0000 Manifest this update: Tue 29 Apr 2025 04:27:28 +0000 Manifest next update: Tue 06 May 2025 04:27:28 +0000 Files and hashes: 1: LyR3675WsNegrUTCcX21_ggNyug.crl (hash: RRoUuj03FYdKo0Ym5vy+IRX66A8lQJXqnhNLVo0rLKc=) 2: 7EF0B0AC4D9B11EEB019A31FC4F9AE02.roa (hash: n+UG6V5XV7UFganlBH1N62nTVgBD1jdXRIOHq8v8JMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 04:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91479A7, serialNumber=2F2477EBBE56B0D7A0AD44C2717DB5FE080DCAE8 Validity Not Before: Apr 29 04:27:28 2025 GMT Not After : May 6 04:27:28 2025 GMT Subject: CN=68105531-2e9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:de:d1:7b:71:ea:12:12:57:a7:b9:23:d8:b9: 98:71:64:d5:6d:8e:88:6a:60:31:99:b9:e8:10:14: 8d:50:92:ae:2d:15:89:88:3c:3b:9d:48:29:db:11: 80:09:bd:50:f0:c4:de:f8:28:99:a6:5e:cf:df:8d: b8:f0:d7:4b:71:44:1d:31:7f:a7:52:b0:bc:14:44: 89:66:7d:da:fe:c4:05:5f:87:9e:f4:cd:4d:71:e2: fa:f6:00:a7:81:42:26:7e:ea:4a:b8:d3:32:4a:da: f1:b5:7f:b0:a0:72:8e:f4:13:ad:02:67:11:ed:b7: ef:3b:0c:f6:cb:87:92:a4:a1:b8:52:51:76:12:a6: 0b:4c:9f:2f:c3:ce:06:3f:60:b4:e0:be:8b:22:95: c5:17:d8:f6:82:d0:55:42:be:40:ed:98:4f:2a:d3: 60:09:7d:ed:fb:a4:39:5b:b6:cf:13:8d:64:64:85: e9:a8:1c:97:99:59:38:52:1d:fe:9b:b5:ee:9b:2f: eb:74:50:5e:88:69:54:d0:07:e9:dc:3e:a9:fa:00: 58:18:9f:f1:70:fe:79:a3:80:21:ca:c3:03:0f:ee: 04:ac:d8:75:77:3e:4d:10:95:a1:cb:29:87:c4:b6: c2:35:be:78:74:cb:f7:fd:01:7f:3e:5c:9f:db:68: bf:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D2:58:EF:DF:D7:0C:1A:B6:A7:A0:A8:8F:5C:1C:42:4C:EB:30:6F X509v3 Authority Key Identifier: keyid:2F:24:77:EB:BE:56:B0:D7:A0:AD:44:C2:71:7D:B5:FE:08:0D:CA:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LyR3675WsNegrUTCcX21_ggNyug.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91479A7/8BA963D443F511EE9A8E4E16C4F9AE02/LyR3675WsNegrUTCcX21_ggNyug.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:92:de:3d:ca:84:79:bf:82:fe:2f:c3:21:f5:d5:4e:78:76: ce:61:49:41:22:56:c4:5d:12:24:58:e8:d3:87:92:dc:fa:3f: 16:69:97:ca:48:50:c2:bc:17:52:ce:79:21:eb:3e:af:cd:ab: 2d:d6:c6:ef:29:c8:7a:22:97:71:78:09:99:7a:72:e8:95:fe: 26:38:f7:0e:6b:8a:81:ee:cc:1a:19:80:46:21:f4:9a:9e:d4: 9d:c7:02:1c:21:c8:f8:d2:51:32:86:34:3c:66:1a:9f:c8:4e: a5:71:4f:33:06:e0:4b:94:dd:da:67:9d:c4:44:f6:d4:5f:e6: d2:2f:fe:41:0b:53:f8:60:d0:06:09:86:19:7e:18:d5:c3:a9: 73:4c:55:6f:9d:00:a6:06:65:72:33:ff:7b:16:2d:3d:eb:e4: 9c:29:88:f3:f9:c3:a7:3b:89:9c:13:f2:dd:d0:f1:fc:51:9c: 67:30:05:2f:26:3c:87:ee:ab:19:e4:7e:72:f7:f8:2f:28:8c: 2f:e8:93:6f:9e:8a:74:d8:21:07:da:64:cd:74:8d:aa:60:c5: c8:ee:97:f3:4d:84:b4:f7:e2:95:82:42:f1:dc:ef:b1:f6:b1: f6:ca:e1:a2:64:a3:e7:9e:1b:e2:d2:b7:d7:a2:35:ed:7a:8f: 86:4a:0b:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc5QTcxMTAvBgNVBAUTKDJGMjQ3N0VCQkU1NkIwRDdBMEFENDRDMjcxN0RCNUZF MDgwRENBRTgwHhcNMjUwNDI5MDQyNzI4WhcNMjUwNTA2MDQyNzI4WjAYMRYwFAYD VQQDEw02ODEwNTUzMS0yZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzd7Re3HqEhJXp7kj2LmYcWTVbY6IamAxmbnoEBSNUJKuLRWJiDw7nUgp2xGA Cb1Q8MTe+CiZpl7P34248NdLcUQdMX+nUrC8FESJZn3a/sQFX4ee9M1NceL69gCn gUImfupKuNMyStrxtX+woHKO9BOtAmcR7bfvOwz2y4eSpKG4UlF2EqYLTJ8vw84G P2C04L6LIpXFF9j2gtBVQr5A7ZhPKtNgCX3t+6Q5W7bPE41kZIXpqByXmVk4Uh3+ m7Xumy/rdFBeiGlU0Afp3D6p+gBYGJ/xcP55o4AhysMDD+4ErNh1dz5NEJWhyymH xLbCNb54dMv3/QF/Plyf22i/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObSWO/f 1wwatqegqI9cHEJM6zBvMB8GA1UdIwQYMBaAFC8kd+u+VrDXoK1EwnF9tf4IDcro MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzlBNy84QkE5NjNENDQz RjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NOZWdyVVRDY1gyMV9nZ055 dWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0x5UjM2NzVXc05lZ3JVVENjWDIxX2dnTnl1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NzlBNy84QkE5NjNENDQzRjUxMUVFOUE4RTRFMTZDNEY5QUUwMi9MeVIzNjc1V3NO ZWdyVVRDY1gyMV9nZ055dWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkt49yoR5v4L+L8Mh9dVOeHbOYUlBIlbEXRIkWOjTh5Lc+j8WaZfK SFDCvBdSznkh6z6vzast1sbvKch6IpdxeAmZenLolf4mOPcOa4qB7swaGYBGIfSa ntSdxwIcIcj40lEyhjQ8ZhqfyE6lcU8zBuBLlN3aZ53ERPbUX+bSL/5BC1P4YNAG CYYZfhjVw6lzTFVvnQCmBmVyM/97Fi096+ScKYjz+cOnO4mcE/Ld0PH8UZxnMAUv JjyH7qsZ5H5y9/gvKIwv6JNvnop02CEH2mTNdI2qYMXI7pfzTYS09+KVgkLx3O+x 9rH2yuGiZKPnnhvi0rfXojXteo+GSguG -----END CERTIFICATE-----Generated at Wed Apr 30 13:37:03 2025 by rpki-client